Re: BRIDGE HELP

Thx for the help. It worked fine.
now before moving to advance mode, I would like to describe the scenario.
 
I am running internet cable.net setup in my local area with around 100+ users. I am filtering users by there MAC Address. some smart users spoof the mac address of working users. I want that this Bridge should also act as a DHCP server too with MAC to IP MATCH binding, so that only specific mac should get the specific ip address, and if the user tries to change the ip or mac, he should get DENY. All other unknown clients shouldn't get any ip or some fake ip with fake gateway.
 
More importantly, how can this be done in simple way, because I have to allow/modify/deny various users on daily basis, so is there a way I can edit any single file lets say /etc/macallowed , and there entries should be like,
 
00-08-74-4D-74-DE   10.0.0.2  # John B-303 Sunview Appartments00-02-74-D2-74-F3   10.0.0.3  # Arnold 402 Aone Bunglows
And so on . . .
how can I tell ebtables to read from the specific file ? and how to setup entries in DHCP ? Can this be done via editing single file ?
 
 

 
Regards, 

SYED JAHANZAIB
 

> Date: Thu, 10 Jan 2008 11:50:19 -0600> From: [email protected]> To: [email protected]> Subject: Re: [Ebtables-user] BRIDGE HELP> On 01/10/08 11:39, AA Inter.Network Services / SYED JAHANZAiB wrote:> > I have setup a Bridge to filter traffic base on mac addresses between > > SERVER pc and LAN , the diagram would be like> > Ok, that should be simple enough.> > > USERS LAN ---> BRIDGE iwd MAC ACL ---> SERVER> > means only allowed mac should be able to pass through the bridge, rest > > of all unknown mac addressess or traffic must be denied. What command > > should I enter ?> > Well, seeing as how this is a bridge, I'd use EBTables.> > > Will ebtable help ? or iptables will do the task ? What commands should > > I enter ?> > I'd set up a list of EBTables commands that check the source MAC address > and allow the frame to be bridged if the source is known good. Not > bothering with the direction of frame flow, you could easily do this.> > ebtables -t filter -P FORWARD DROP> ebtables -t filter -A FORWARD -s <Server 1 MAC> -j ACCEPT> ebtables -t filter -A FORWARD -s <Client 1 MAC> -j ACCEPT> ebtables -t filter -A FORWARD -s <Client 2 MAC> -j ACCEPT> ebtables -t filter -A FORWARD -s <Client 3 MAC> -j ACCEPT> . . .> ebtables -t filter -A FORWARD -s <Client n MAC> -j ACCEPT> > > Am I missing anything ?> > When using bridging, a layer 2 technology, use EBTables the layer 2 > filtering filtering technology. Don't involve IPTables (a layer 3 > filtering technology) in a layer 2 operation unless you (really) need > to. If you do enable IPTables to see bridged traffic, you will need to > be aware that IPTables will see bridged traffic in addition to routed > traffic.> > > > Grant. . . .
_________________________________________________________________
Put your friends on the big screen with Windows Vista® + Windows Live™.
http://www.microsoft.com/windows/shop/specialoffers.mspx?ocid=TXT_TAGLM_CPC_MediaCtr_bigscreen_012008

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace

_______________________________________________
Ebtables-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ebtables-user